name: Build and Push

on:
  release:
    types: [published]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Login to Gitea Registry
        uses: docker/login-action@v3
        with:
          registry: git.schweitz.internal
          username: ${{ secrets.REGISTRY_USER }}
          password: ${{ secrets.REGISTRY_PASSWORD }}

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          provenance: false
          sbom: false
          tags: |
            git.schweitz.internal/jpmschweitzer/tatlock:latest
            git.schweitz.internal/jpmschweitzer/tatlock:${{ github.ref_name }}

      - name: Trigger Watchtower update
        if: success()
        run: |
          curl -sf -H "Authorization: Bearer ${{ secrets.WATCHTOWER_TOKEN }}" \
            http://watchtower:8080/v1/update